Your email, thoughtfully handled

HemHuggers email privacy

Checking signup availability…

Who is responsible

CleverLittleThings (United States) is responsible for this launch list.

What you’re signing up for

With your permission, CleverLittleThings will use your email address to send HemHuggers launch news. We ask you to confirm your address before your subscription becomes active. You can unsubscribe through the link in our emails.

What we keep

We store your email address, subscription status, request and confirmation times, and the version of the consent you accepted. We may also keep a broad source such as Instagram, TikTok or direct to understand where signups come from. We don’t store the original referring page or campaign URL with your signup.

Who can access it

The subscriber list is held on our server and is available only through an authenticated owner dashboard. We use Resend to send confirmation emails; it receives your email address and the message needed for delivery. Namecheap Private Email hosts our hello@cleverlittlethings.store inbox and handles messages you send us. Server operators and authorised service providers may have access necessary to run these services. Signup addresses are not included in our visitor analytics.

Visit records and approximate location

When visit logging is enabled, our server records public page requests, their time, and the connecting IP address. This includes automated requests and repeat visits. We also record the IP address when a new signup is accepted. A local IP database may estimate the country, region and city; this is not GPS and can describe a VPN, network provider or proxy rather than your location. We do not keep page queries, full referrers or browser fingerprints in these records.

IP addresses and location estimates are encrypted in our private database and available to the authenticated owner. These records expire after 30 days; the request log also keeps at most 50,000 recent entries. Earlier records may remain in encrypted backups. This server log is separate from optional visitor analytics and does not depend on the analytics choice.

Optional behavior analytics

If you allow analytics, we measure landing-page visits, broad traffic sources, section and image views, video starts and watch progress, selected clicks, and signup milestones. We store these records privately on our own server for up to 30 days. They are not sent to a separate analytics provider, and do not include email addresses, form contents, raw IPs, full page addresses, browser fingerprints or screen recordings.

We save a random browser code for up to 30 days to estimate returning visitors. The server stores a keyed version of that code. A separate temporary visit code stays in page memory. If you sign up while analytics is allowed, a private link records whether that visit led to a new request and later email confirmation. This makes the records pseudonymous, not anonymous. The owner sees aggregate behavior reports, not a browsing history beside your email address. The separate IP request log is not joined to these behavior records.

Analytics is off until you allow it, and respects browser Do Not Track and Global Privacy Control signals. Rejecting it does not affect signup. Use Analytics preferences on the landing page to stop future behavior tracking and remove the browser code. Records already accepted, including the later confirmation of an attributed signup, can remain until their 30-day expiry. Deleting a subscription removes its linked visit from live analytics; encrypted backups may retain earlier records.

Protecting the signup form

When enabled, Cloudflare Turnstile checks the signup form for automated abuse. Its widget processes technical connection and browser information. Our server sends the verification token to Cloudflare, without your email address, to check it before accepting a signup. See Cloudflare’s privacy policy.

How long we keep it

Unconfirmed requests are deleted 30 days after the original signup request. Confirmation links expire after 24 hours. Confirmed and unsubscribed records have no automatic expiry. Unsubscribing stops future launch mailings but does not automatically delete your email address, subscription status or consent records.

When we fulfil a deletion request, we remove your stored email address and source information. A protected matching record and limited activity and consent records remain to honour your choice and prevent your address being added again. These retained records have no automatic expiry. Encrypted backups may contain earlier records and are not deleted automatically. Contact us to request access, correction or deletion, or to ask about retention.

Contact

For privacy questions or requests, contact hello@cleverlittlethings.store.

Last updated: 20 October 2026 · Back to HemHuggers